Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/t7SXLRUmFb5t5I9r73TwbTY-5pE.roa
File: t7SXLRUmFb5t5I9r73TwbTY-5pE.roa (raw, json)
Hash identifier: BGWbcx/GvTTCMEoIE5yivXCW8dbDmm7s6miW+i/VEEw=
Subject key identifier: B7:B4:97:2D:15:26:15:BE:6D:E4:8F:6B:EF:74:F0:6D:36:3E:E6:91
Certificate issuer: /CN=ae52db82090b343f89f7c637cf41a94bcfd4346a
Certificate serial: 0199E409E702C8A8D7A83C2E8D3429019766
Authority key identifier: AE:52:DB:82:09:0B:34:3F:89:F7:C6:37:CF:41:A9:4B:CF:D4:34:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rlLbggkLND-J98Y3z0GpS8_UNGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/t7SXLRUmFb5t5I9r73TwbTY-5pE.roa
Signing time: Tue 14 Oct 2025 18:44:38 +0000
ROA not before: Tue 14 Oct 2025 18:44:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20956
IP address blocks: 128.140.186.0/23 maxlen: 23
128.140.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/rlLbggkLND-J98Y3z0GpS8_UNGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/rlLbggkLND-J98Y3z0GpS8_UNGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rlLbggkLND-J98Y3z0GpS8_UNGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e4:09:e7:02:c8:a8:d7:a8:3c:2e:8d:34:29:01:97:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae52db82090b343f89f7c637cf41a94bcfd4346a
Validity
Not Before: Oct 14 18:44:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b7b4972d152615be6de48f6bef74f06d363ee691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b0:49:b8:a6:74:ac:ee:de:cb:ab:f0:74:d6:
80:08:cb:f1:e2:dc:84:12:64:84:ab:e1:82:6f:5d:
ac:30:6a:f5:b7:33:b4:f8:75:69:08:37:c7:fd:19:
cd:d2:c7:54:20:2d:0d:ee:a0:c9:ab:50:8b:52:55:
21:6f:f5:9e:16:4c:54:72:5c:f1:13:99:00:47:76:
b6:ba:83:25:86:d8:9d:2e:f3:20:e8:21:60:ee:c5:
ab:aa:77:2d:fd:d0:6b:50:b3:08:f6:65:48:55:02:
a7:66:81:d2:07:2c:ec:b4:15:b8:a2:e4:40:91:07:
67:71:c1:05:ba:25:47:e0:93:ef:16:16:ca:ae:7e:
fc:fa:22:40:5d:c3:89:40:61:70:7e:f6:a6:55:6d:
83:6e:03:ea:3c:4a:dc:d7:9b:91:49:d1:69:af:07:
c1:b0:b0:d3:35:a9:54:09:0f:a8:26:76:f9:4d:be:
a9:c4:53:3c:97:31:15:cf:98:e5:74:1a:b6:ed:43:
4f:19:41:4e:bb:50:fb:06:6d:d3:64:ac:ec:b1:d3:
d4:2a:6a:5b:31:a9:a2:e6:20:cf:dc:3b:99:1c:ec:
29:70:7d:84:10:74:2b:99:2c:c2:14:99:d8:1c:25:
5c:0b:c1:d7:f2:53:e6:d4:02:ff:8e:5d:21:b0:6e:
4a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B4:97:2D:15:26:15:BE:6D:E4:8F:6B:EF:74:F0:6D:36:3E:E6:91
X509v3 Authority Key Identifier:
keyid:AE:52:DB:82:09:0B:34:3F:89:F7:C6:37:CF:41:A9:4B:CF:D4:34:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rlLbggkLND-J98Y3z0GpS8_UNGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/t7SXLRUmFb5t5I9r73TwbTY-5pE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/rlLbggkLND-J98Y3z0GpS8_UNGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.140.186.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:35:34:4e:1d:5a:9a:78:52:8e:c3:5f:d4:c0:0a:45:af:d8:
2d:6a:27:0f:67:51:14:0a:13:bd:60:e7:c5:3a:52:e1:a8:d7:
19:b2:2f:c1:ec:9d:d8:bf:16:bc:94:c5:1d:d7:7d:15:07:8f:
40:e2:90:f8:30:ec:32:79:33:97:97:a8:de:94:5e:a0:61:8f:
7b:16:71:05:fd:0c:c1:17:51:34:c0:ba:c6:80:b0:07:31:ca:
86:0f:2a:d4:31:51:ff:07:63:4c:70:f3:40:ce:b7:95:68:61:
2a:da:ba:ec:2a:55:8f:f4:5d:6f:2e:88:64:58:98:00:5e:51:
39:b1:2f:f7:30:ce:f5:c0:b2:fd:5a:99:b3:9d:ae:4e:d0:e0:
3a:33:ff:86:7a:fc:1a:d6:6f:d2:d5:0b:57:59:5d:51:5d:ab:
b8:64:4a:de:cc:6b:4c:bb:d5:ff:5e:6b:08:f0:36:f5:48:9d:
ba:10:de:56:d7:c2:48:34:a2:25:f3:f3:c2:2e:bb:bc:07:34:
7f:5c:4b:52:45:53:5e:e6:0e:b1:81:ef:0b:bd:d6:b8:c2:2d:
f5:fb:75:21:f2:37:4d:25:b9:21:dc:d8:89:aa:94:20:9c:67:
ff:e7:69:93:e9:85:c7:01:a2:00:ad:88:60:c9:7a:87:b8:1e:
c8:f2:53:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:24:37 2025 by rpki-client